Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

docs/api-surface.md

@@ -1,3 +1,5 @@
+**Language / Язык:** [English](api-surface.md) | [Русский](ru/api-surface.md)
+
 # API surface
 
 ## Request path
@@ -33,7 +35,8 @@ not part of the product contract. See the workspace durable-simulator rule.
 
 - Interactive FastAPI docs: `/docs`
 - Web UI method inspector: `/` → catalog → method
-- UI APIs: `/ui/api/catalog`, `/ui/api/method`, `/ui/api/compatibility`
+- UI APIs: `/ui/api/versions`, `/ui/api/catalog`, `/ui/api/method`,
+  `/ui/api/compatibility`, `/ui/api/contract/apply`, `/ui/api/demo/*`
 
 ## Compatibility endpoints